Securing Wireless Enterprise Networks (300-375) Free Practice Test

Question 1

When using the Standalone Profile Editor in the Cisco AnyConnect v3.0 to create a new NAM profile, which two statements describe the profile becoming active? (Choose two.)

A. selects the new profile from NAM

B. ensures use of "nam.xml" as the profile name

C. becomes active after a save of the profile name

D. ensures use of "configuration.xml" as the profile name

E. selects "Network Repair" from NAM

F. ensures use of "config.xml" as the profile name

Correct Answer: D,E

Question 2

A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type External. Which two elements are required as part of the configuration? (Choose two.)

A. WLAN being not present in the default AP group

B. HTTPS redirection enabled

C. web-auth secure web option enabled

D. preauth ACL to allow access to the external web server

E. IP address assigned to the virtual interface on the WLC, which is not routable

Correct Answer: C,D

Question 3

Which two attacks represent a social engineering attack? (Choose two.)

A. entering a business and posing as IT support staff

B. calling the IT helpdesk and asking for network information

C. using AirMagnet Wi-Fi Analyzer to search for hidden SSIDs

D. spoofing the MAC address of an employee device

Correct Answer: A,B

Question 4

An engineer is preparing to implement a BYOD SSID at remote offices using local switching and wants to ensure that Wi-Fi Direct clients can communicate after the SSID is deployed. The engineer is planning on implementing the config wlan wifidirect allow 1 command. Which Wi-Fi Direct Client Policy consideration is applicable?

A. Policy is applicable only with central switched WLANs on FlexConnect Aps.

B. Policy is applicable only on WLANs that have APs in local mode only.

C. Policy is applicable only to APs in FlexConnect mode only.

D. Policy is applicable only when P2P is set to disabled.

Correct Answer: B

Question 5

WPA2 Enterprise with 802.1x is being used for clients to authenticate to a wireless network through an ISE server. For security reasons, the network engineer wants to ensure only PEAP authentication can be used. The engineer sent instructions to clients on how to configure their supplicants, but users are still in the ISE logs authentication using EAP-FAST. Which option describes the most efficient way the engineer can ensure these users cannot access the network unless the correct authentication mechanism is configured?

A. Enable AAA override on the SSID, gather the usernames of these users, and disable their RADIUS accounts until they make sure they correctly configured their devices.

B. Enable AAA override on the SSID and configure an access policy in ACS that allows access only when the EAP authentication method is PEAP.

C. Enable AAA override on the SSID and configure an access policy in ACS that denies access to the list of MACs that have used EAP-FAST.

D. Enable AAA override on the SSID and configure an access policy in ACS that puts clients that authenticated using EAP-FAST into a quarantine VLAN.

Correct Answer: B

Question 6

By default, after how many days is an event deleted from Cisco Prime Infrastructure database?

A. 15 days

B. 7 days

C. 60 days

D. 30 days

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

How should the Cisco Secure ACS v4.2 and the Cisco WLC v7.0 be configured to support wireless client authentication?

A. The WLC configured for TACACS+ and the Cisco Secure ACS configured for TACACS+ (Cisco Airespace)

B. The WLC configured for TACACS+ and the Cisco Secure ACS configured for TACACS+ (Cisco IOS)

C. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (IETF)

D. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (Cisco Airespace)

Correct Answer: D

Question 8

A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE. The controllers are configured using auto-anchor for the guest network. Which three components must be implemented for the foreign WLC? (Choose three.)

A. local preauth ACL on WLC

B. WLAN Layer 2 security

C. downloadable preauth ACL on ISE

D. HTTP RADIUS profiling enabled.

E. DHCP RADIUS profiling enabled.

F. UDP/1812-1813 open to ISE

Correct Answer: B,F

Question 9

Which command is an SNMPv3-specific command that an engineer can use only in Cisco IOS XE?

A. snmp-server community comaccess ro 4

B. snmp-server host 172.16.1.33 public

C. snmp-server user remoteuser1 group1 remote 10.12.0.4

D. snmp-server enable traps wireless

Correct Answer: C

Welcome to TestSimulate

Cisco Securing Wireless Enterprise Networks (300-375) Free Practice Test